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We consider the Gaussian Multiple Access Wire-Tap Channel (GMAC-WT). In this scenario, 
multiple users communicate with an intended receiver in the presence of an intelligent and informed 
wire-tapper who receives a degraded version of the signal at the receiver. We define suitable security 
measures for this multi-access environment. Using codebooks generated randomly according to a Gaus- 
sian distribution, achievable secrecy rate regions are identified using superposition coding and TDMA 
coding schemes. An upper bound for the secrecy sum-rate is derived, and our coding schemes are shown 
to achieve the sum capacity. Numerical results showing the new rate region are presented and compared 
with the capacity region of the Gaussian Multiple-Access Channel (GMAC) with no secrecy constraints, 
quantifying the price paid for secrecy. 
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I. Introduction 

Shannon, in [3], analyzed secrecy systems in communications and showed that, to achieve 
perfect secrecy of communications, the conditional probability of the cryptogram given a message 
must be independent of the actual transmitted message. In [4], Wyner applied this concept to 
the discrete memoryless channel, with a wire-tapper who has access to a degraded version 
of the intended receiver's signal. He measured the amount of "secrecy" using the conditional 
entropy A, the conditional entropy of the transmitted message given the received signal at the 
wire-tapper. The region of all possible rate/equivocation, (R,A), pairs is determined, and the 
existence of a positive secrecy capacity, C s , for communication below which it is possible to 
limit the rate of information leaked to the wire-tapper to arbitrarily small values, is shown [4]. 
Carleial and Hellman, in [5], showed that it is possible to send several low-rate messages, each 
completely protected from the wire-tapper individually, and use the channel at close to capacity. 
The drawback is, in this case, if any of the messages are revealed to the wire-tapper, the others 
might also be compromised. In [6], the authors extended Wyner's results to Gaussian channels 
and also showed that Carleial and Hellman's results in [5] also held for the Gaussian channel. 
Csiszar and Korner, in [7], showed that Wyner's results can be extended to weaker, so called 
"less noisy" and "more capable" channels. Furthermore, they analyzed the more general case of 
sending common information to both the receiver and the wire-tapper, and private information 
to the receiver only. 

More recently, the closely related problem of common randomness and secret key generation 
has gathered attention. Maurer, [8], and Bennett et. al., [9], have focused on the process of 
"distilling" a secret key between two parties in the presence of a wire-tapper. In this scenario, 
the wire-tapper has partial information about a common random variable shared by the two 
parties, and the parties use their knowledge of the wire-tapper's limitations to generate a secret 
key. Reference [9] breaks this down into three main steps: (i) advantage distillation: where the 
two parties have zero wiretap capacity and need to find some way of creating an advantage 
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over the wire-tapper, (ii) information reconciliation: where the secret key decided by one of the 
partners is communicated to the other partner and the wire-tapper is still left with only partial 
information about it, (iii) privacy amplification: where a new secret key is generated from the 
previous one about which the wire-tapper has negligible information. In [8], it was shown that for 
the case when the wire-tap channel capacity is zero between two users, the existence of a "public" 
feedback channel that the wire-tapper can also observe can nevertheless enable the two parties to 
be able to generate a secret key with perfect secrecy. This discussion was then furthered by [10] 
and [11] where the secrecy key capacities and common randomness capacities, the maximum 
rates of common randomness that can be generated by two terminals, were developed for several 
models. It was also argued in [12], that the secrecy constraint developed by Wyner and later 
utilized by Csiszar and Korner was "weak" since it only constrained the rate of information 
leaked to the wire-tapper, rather than the total information. It was shown that Wyner's scenario 
could be extended to "strong" secrecy for discrete channels with no loss in achievable rates, 
where the secrecy constraint is placed on the total information obtained by the wire-tapper, as 
the information of interest might be in the small amount leaked. This corresponds to making 
the leaked information go to zero exponentially rather than just inversely with n. Maurer then 
examined the case of active adversaries, where the wire-tapper has read/write access to the 
channel in [13]- [15]. Venkatesan and Anantharam examined the cases where the two terminals 
generating common randomness were connected by different DMC's in [16] and later generalized 
this to a network of DMC's connecting any finite number of terminals in [17]. Csiszar and 
Narayan extended Ahslwede and Csiszar's previous work to multiple-terminals by looking at 
what a helper terminal can contribute in [18], and the case of multiple terminals where an 
arbitrary number of terminals are trying to distill a secret key and a subset of these terminals 
can act as helper terminals to the rest in [19]. 

More recently, the notion of the wire-tap channel has been extended to parallel channels and 
fading channels [20]-[25]. Broadcast and interference channels with confidential messages were 
considered in [26]. References [27], [28] examined the so called multiple access channel with 
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confidential messages, where two transmitters try to keep their messages secret from each other 
while communicating with a common receiver, finding an achievable region, and the capacity 
region for some special cases. 

In this paper, we define the Gaussian Multiple Access Wire-Tap Channel (GMAC-WT) where 
multiple users are transmitting to a base station in the presence of AWGN, and a wiretapper 
receives a noisy version of the signal received at the base station. For this new multi-transmitter 
secrecy paradigm, we first define two separate secrecy constraints, which we call the individual 
and collective secrecy constraints. These are (i) the normalized entropy of any set of messages 
conditioned on the transmitted codewords of the other users and the received signal at the wire- 
tapper, and (ii) the normalized entropy of any set of messages conditioned on the wire-tapper's 
received signal. The first set of constraints is more conservative to ensure secrecy of any subset 
of users even when the remaining users are compromised. The second set of constraints ensures 
the collective secrecy of any set of users, utilizing the secrecy of the remaining users. In [1], 
we concerned ourselves mainly with the perfect secrecy rate region for both sets of constraints. 
In this paper, we consider the general case where a pre-determined level of secrecy is provided. 
Using codebooks generated according to a Gaussian distribution and superposition coding, we 
find the achievable secrecy rate regions for each constraint, where users can communicate with 
arbitrarily small probability of error with the intended receiver, while the wire-tapper is kept 
ignorant to a pre-determined level. This scheme achieves the secrecy sum capacity for collective 
constraints. We also find a secrecy rate region using TDMA and the results of [6] for a single-user. 
This scheme achieves secrecy sum capacity for both constraints, but is smaller than the region 
for collective constraints. When individual constraints are considered, the achievable region is 
the convex hull of the union of the superposition coding and TDMA regions. 

Finally, a word on notation: Throughout the paper, we denote vectors with bold letters, as 
well as letters with superscripts as the length of the vector whenever necessary. Sets are denoted 
using a script font. Also, for random variables X, Y, we use H(X) to refer to the entropy of X 
when it is discrete, h(X) to refer to the differential entropy when X is continuous, and I(X; Y) 
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to refer to the mutual information of X, Y. All the logarithms are taken to base 2, such that the 
resulting information theoretic quantities are in bits. 



II. System Model and Problem Statement 

We consider K users communicating with a receiver in the presence of a wire-tapper in a 
Gaussian channel. The model under consideration is presented in Figure 1. In general, transmitter 
k G K, = {l,...,Ji} chooses a message Wk from a set of equally likely messages V\4 = 
{l,...,Mfc}. The messages are encoded using (2 nRk ,n) codes into {X%(Wj)}, where Rk = 
- log 2 Mfe. The encoded messages {X^} = {X^ } are then transmitted, and the intended receiver 
and the wire-tapper get Y = Y n and Z = Z n , respectively. The receiver decodes Y to get an 
estimate of the transmitted messages, W. We would like to communicate with the receiver with 
arbitrarily low probability of error, while maintaining secrecy to a pre-determined level 5. The 
signals at the intended receiver and the wiretapper are then given by 

Y = Ef = i V / ^X fc + N M (la) 

z = Ef = iV^x fe + N w (lb) 

where N M , N w are the AWGN at the intended receiver and eavesdropper, respectively. Each 
component of N M ~ A/"(0, cr^) and N w ~ A/"(0,cr^). The transmit power constraints are given 
by - E?=i Hi < Pk, k — 1, . . . ,K. Faithful to Wyner's terminology, we shall call this channel 
model, The Gaussian Multiple-Access Wire-Tap Channel (GMAC-WT). 

Similar to the scaling transformation to put an interference channel in standard form, [29], 
we can represent any GMAC-WT by an equivalent standard form, [2]: 

Y = EfliXfc + N M (2a) 
Z = Ef = iV& fe + N w (2b) 

where 
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• the codewords {X} are scaled to get X fc = 

• the new power constraints are P k = -rP k ; 




M 



• the new wiretapper channel gains are hu 




. the AWGN are normalized by N M = \N M and N w = 4-N w - 

In this paper, we shall examine the case where the wire-tapper receives a stochastically 
degraded version of the signal received at the legitimate receiver, i.e., there exists a distribution 
p(z\y) such that we can write p(z\x±, . . . ,xk) = f^° 00 p(y\xx, . . . ,XK)p(z\y)dy. Similar to the 
broadcast channel, since the legitimate receiver and the eavesdropper do not cooperate, noise 
correlations do not play a role, and as a result, the capacity of the stochastically degraded 
wire-tap channel is the same as that of the physically degraded wire-tap channel, which means 
p(y, z\xx, . . . , x K ) = p(y\xi, . . . , x K )p{z\y). It can easily be shown that the wire-tapper gets a 
stochastically degraded version of the receiver's signal if hi = . . . = h K = h < 1. Equivalently, 
we consider the physically degraded case, where the wire-tapper's received signal is a noisier 
version of the legitimate receiver's scaled received signal, Z = v^Y + N MW , where N MW has 
each component ~ J\f (0, 1 — h) and is independent of Y. This model is illustrated in Figure 
1. In practical situations, we can think of this as the wire-tapper being outside of a controlled 
indoor environment, such as in [30] or just being able to wire-tap the receiver rather than receive 
the signals itself. 

A. The Secrecy Measures 

Letting A s be our secrecy constraint for any subset S of users, we require that A s > 8 for 
all sets S C KL, with 5 E [0, 1] as the required level of secrecy. 5=1 corresponds to perfect 
secrecy, where the wire-tapper is not allowed to get any information; and 5 = corresponds to 
no secrecy constraint. To that end, we define two sets of secrecy constraints using the normalized 
equivocations for sets of users. These are: 
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1 ) Individual Secrecy: We define the individual secrecy measure for a subset of users, S C K, 



as 



, F(W 5 |X <S c,Z) 



A * = H(W s i V5C/C = {1,...^} (3) 

where W 5 = {W k }kes- denotes the normalized entropy of the transmitted messages of 
a set S of users, given the received signal at the wire-tapper as well as the remaining users' 
transmitted symbols. As our secrecy criterion, this guarantees that the rate of information leaked 
to the wire-tapper from a group of users is limited even if all the other users' transmitted 
codewords are compromised. Note that this is a stronger constraint than H(Ws[Ws c , Z), as 
if(W 5 |W 5 c, Z) > if(W 5 |W 5 c, X 5 c, Z) = //(W^X^c, Z). In addition, from a practical point 
of view, if the transmitted messages are compromised either due to byzantine users or some 
other side information allowing the eavesdropper to decode the transmitted messages of a group 
of users, there is no reason to expect that the transmitted codewords are not known to the 
eavesdropper. Thus, this represents a scenario where users do not have to trust each other. 

We note that if the individual secrecy constraints for all users in the set S are satisfied, i.e., 
A/t > 5,Vk e S, then the constraint for set S is also satisfied. To see this, without loss of 
generality, let S — 1, . . . , S where S < K and assume H( -^ fc ( ,^ c ' z - > > 5. We can write 

s 

H(W s \X S c, Z) = H(W k \W k ~\ X S c, Z) (4) 
fc=i 
s 

> J2 H{W k \W k ~\ X fec ,Z) (5) 

k=l 

S 

= Y,H(W k \X kc ,Z) (6) 

fc=i 
s 

>Y.SH{W k ) (7) 

k=i 

= SH(W S ) (8) 



where (5) follows using conditioning, (6) is due to the fact that Wj is conditionally independent 
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of all Wk given X fc , Z. (7) comes from our assumption that for all k E S, A l k > 5. Thus, for any 
subset of users the individual secrecy constraints for all users also guarantee the joint secrecy 
of the same level for the entire set. 

2) Collective Secrecy: Clearly (3) is a conservative measure where users do not place any trust 
on each other. We now define a revised secrecy measure to take into account the multi-access 
nature of the channel where users rely on others to achieve secrecy for the whole group. 

Using this constraint guarantees that each subset of users maintains a level of secrecy greater 
than 5. Since this must be true for all sets of users, collectively the system has at least the same 
level of secrecy. However, if a group of users are somehow compromised, the remaining users 
may also be vulnerable. We require the secrecy constraint to be satisfied separately for each 
S C K,, since otherwise it is possible to have A^ > 5, but Aj < 5 for some J C S. However, 
if S = 1, i.e. when we require perfect secrecy, we can show that > 1 — e =>- A^ > 1 — e' for 
all S C /C, where e' — > as e — >• 0. To see this, write 

H(W S \Z) + H(W S °) > H(W S \Z) + #(W 5 c|W 5 , Z) (10) 

= H(W IC \Z) (11) 

> (1 - e)H(W K ) (12) 

= (1 - e)H(W s ) + (1 - e)H(W S c) (13) 

where (11) follows from the chain rule of entropy and (12) from the requirement for perfect 
secrecy. Comparing the left hand side of (10) and (13), since conditioning cannot increase 
entropy, we see that we have to have 

H(W S \Z) 



H(W £ 



> 1 - € (14) 
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where e' = (l + jjmf^j ) e as e — > 0. Thus, perfect secrecy for the ensemble of users 
guarantees perfect secrecy for all subsets of users. 

B. The 5-secret Achievable Rate Region 

Definition 1 (Achievable Rates with 5-secrecy): Let £ = / if using individual constraints, and 
£ = C if using collective constraints. The rate A'-tuple R = (R\, . . . , is said to be achievable 
with 5-secrecy under constraint £, if for any given e > there exists a code of sufficient length 
n such that 

- log 2 M k > R k - e, k = l,...,K (15) 

n 

P e < e (16) 
A| > 5, VS C /C (17) 

where user chooses one of M k symbols to transmit according to the uniform distribution, A| 
denotes the secrecy constraint, and is given by (3) if £ = /, and by (9) if £ = C. We will call 
the set of all achievable rates with 5-secrecy, the 5-secret achievable rate region, and denote it 
CH5). 

C. Some Preliminary Definitions 
Before we state our results, we also define the following quantities for any S C K, 

Ps — Y^kesPk 
Rs — Y.k£sRk 
C u s ±\\og{l + Ps) 

a 1 , (, hPs \ 



(18) 
(19) 
(20) 

(21) 
(22) 
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Alternately, we also use the subscript sum when S = K,. 



III. Achievable 5-Secrecy Rate Regions 



In this section, we find a set of achievable rates using Gaussian codebooks, which we denote 
by G($). We first give the achievable regions satisfying the individual and collective secrecy 
constraints, denoted by Q l (5) and Q C (S) respectively, using superposition coding. We then give 
the region when TDMA is used, denoted Q T (5), and satisfies both secrecy constraints. For the 
collective secrecy constraints, the TDMA region is seen to be smaller than the superposition 
coding region. For the individual constraints, the achievable region is the convex hull of the 
union of the superposition and TDMA regions, denoted Q [ U (S). 

A. Individual Secrecy 

In [6], it has been shown that Gaussian codebooks can be used to maintain secrecy for the 
single user Gaussian wire-tap channel. Using a similar approach, we present an achievable region 
for 5-secrecy using individual secrecy constraints in Theorem 1. 

Theorem 1: The following region is achievable with 5-secrecy for the GMAC-WT using 
Gaussian codebooks. 



Proof: Coding Scheme: Let R = (R 1 , . . . , R K ) satisfy (23). For each user k e /C, consider 
the scheme: 

1) Let M k = 2 n{Rk - € ' ] where < e' < e. Let M k = M ks M k0 where, for some 1 > fi k > 5 to 
be chosen later, M ks = Mg k , M k0 = M^K We then have R k = R ks + R k0 + e', where 
R ks = - \ogM ks and R k o = -logM^o- We can choose e' and n to ensure that M ks , M k0 
are integers. 

2) Generate 3 codebooks % ks ,X k0 and X kx . X ks consists of M ks codewords, each compo- 
nent of which is drawn from M (0, X ks P k — e). Codebook X k0 has M k0 codewords with 




(23) 
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each component drawn from J\f (0, \ k oP k — e) an d Xkx nas M kx codewords with each 
component drawn from A/"(0, XkxPk — e). Here, £ is an arbitrarily small number to ensure 
that the power constraints are satisfied with high probability, and Afc a +Afco+Afc r =l. Define 
R kx = i logM fcx and M fci = M k M kx . 

3) Each message Wfc e {l,...,M fc } is mapped into a message vector W fc = (W ks ,W k0 ) 
where M4 S € {1, ■ ■■,M ks } and W^o G {1, • • • , -^jfco}- Since is uniformly chosen, 
W ks , Wfco are a l so uniformly distributed. 

4) To transmit message W k G {1, . . . ,M k }, user fc finds the 2 codewords corresponding to 
components of W fc from and X k0 , and also uniformly chooses a codeword from 3^.. 
He then adds all these codewords and transmits the resulting codeword, so that we are 
actually transmitting one of M kt codewords. Let R kt = - log M kt +e' = R ks +R k0 +R kx +e' . 

Specifically, the rates are chosen to satisfy VS C K: 

T,kesRks = T,k£S^kRk < C$ ~^2C k (24) 

kes 

Rko + R kx = (1 - fi k )R k + R kx = C fc w , Vfce5 (25) 

T,kes R kt = J2kes[ R k + Rkx] < Cg (26) 

Consider the sub-code {X. ks } k=1 . From this point of view, the coding scheme described is 
equivalent to each user k e K, selecting one of M ks messages, and sending a uniformly chosen 
codeword from among M k0 M kx codewords for each. Let A|. = H ^^ k k ^' Z ' > an d write: 



H(W ks \X, 


: c)-/(W fcs ;Z|X fco ) 


(27) 


H(W ks ) - 


I(W ks ; Z|X fc c) 


(28) 


H(W ks ) - 


I(W ks ;Z\X kc ) + I(W ks ;Z\Xjc) 


(29) 


H(W ks ) - 


/7(Z|X fe c) + /7(Z|W fes ,X fe c)+/7(Z|X X ;)-/ 7 (Z|X K; ,W fcs ) 


(30) 


H(W ks ) - 


I(X-k) Z X fcc ) + I(Xfc; Z\W ks , X k c) 


(3D 
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where (28) follows from the fact that the secret message of user k is independent of the 
codewords of the remaining users, and (29) follows since the received signal at the eavesdropper 
is independent of the transmitted secret messages given the actual transmitted codewords. Thus, 
we have: 

~ = H(W ks \X kc ,Z) = _ I(X k ;Z\X k c) - I(X k ;Z\W ksi X k c) 
H(W ks ) H(W k " 



By the converse to the coding theorem for the Gaussian Multiple Access Channel, we have 
I(X k ; Z|X fcc ) < nCl. We can also write 

I(X k ; Z\W ksj X fcc ) = H(X k \W ks , X fcc ) - H(X k \ W ks , X fcc , Z) (33) 

For each secret message of user k, our coding scheme implies that it sends one of M k0 M kx 
possible codewords. By choosing R k0 , R kx to satisfy (25), we guarantee that 

H(X k \W ks ,X kc ) = H(X k \W ks ) = nCl (34) 

Also, 

H(X k \W kS} X k o : Z) <n5 n (35) 

where 5 n — > due to Fano's Inequality. This stems from the fact that given W ks , the sub-code 
for user k is, with high probability, a "good" code for the wiretapper. Combining these in (32), 
we can write 

A - al - -iwt) =1 -« <36) 

where e = 4^ > as n — > oo. 

tlhs 

Then, we can write 



H(W k \X kc ,Z) > H(W ks \X kc ,Z) (l-e)H(W ka ) (1 - e)fi k R k 
H(W k ) ~ ~ ~ H(W k ) ~ ~ ~ H(W k ) ~~~ R k 



Since (37) holds for all k = 1, . . . , K, from (8) we have > 5, VS C K. □ 
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Remark 1: In this case, the maximum 5-secrecy sum-rate achievable is given by 

1 



R 1 sum (5)=mm lC^- 



K 



k=l 



(38) 



Observe that there is a reduction of J2k=i ^k — m me ^-secrecy sum-rate due to secrecy 
constraints when the second term is the minimum. Also observe that the transmission of all the 
users with their maximum power may not be optimal for this case. 

B. Collective Secrecy 

Theorem 2: We can transmit with 5-secrecy using Gaussian codebooks at rates in the region 
Q C (S) defined as 

£ c (<5)^{r : ik<mmjcS,i[C£-C£]} VS C /cj (39) 

Proof: Let R = (Ri, . . . , R K ) satisfy (39) and assume the coding scheme is the same as 
described in the individual constraints case, except that instead of (24)-(26), we will choose the 
rates such that for all S C /C, 

Efee<s-Rfes = Y.kasl^kRk <Cg — Cg (40) 
SfcLit-Rfco + Rkx] = Sfc=i[(l — Hk)Rk + Rkx] = C]c (41) 

Y^kes^kt = I2k£s[Rk + Rkx] < Cg (42) 

From (42) and the GMAC coding theorem, with high probability the receiver can decode the 
codewords with low probability of error. To show A^ > 5, V«S C /C, we concern ourselves 
only with MAC sub-code {Xks}k=i- From this point of view, the coding scheme described is 
equivalent to each user k E K, selecting one of M ks messages, and sending a uniformly chosen 
codeword from among M k0 M kx codewords for each. Let W s s = {WksjkeS an d A^ = ^yiy 
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and define X s = Y£=i ^k- For & write 



H(W K \Z) = H(W K ) 


- i(w s K ; z) 


(43) 


= H(Wh) 


-J(Wjfc;Z)+I(WfcZ|X E ) 


(44) 


= H(W* K ) 


- h(Z) + h(Z\W s K ) + ft(Z|X E ) - /j(Z|W£,X e ) 


(45) 


= H(W' K ) 


-I(X E ;Z) + I(X S ;Z|W£) 


(46) 



where (44) follows from — > X E — > Z. Therefore, we have: 

Ac ff(Wjfc|Z) _ Z(X s ;Z)-Z(X E ;Z|Wjfc) 
* 2T(Wfc) tf(Wfc) 1 j 

Consider the two terms individually. First, we have the sum-rate bound of the multiple access 
channel to the eavesdropper: 

J(X s ;Z)<nC* (48) 

7(X S ; Z|W£) = #(X E |W^)-iJ(X s |W^, Z). Since user jfe sends one of M k0 M kx codewords 
for each message, from (41) we have 

#(X S |W^) = log (nf =1 M k0 M kx ) (49) 

= nCl (50) 

We can also write 

JJ(X E |W£,Z) <nn' n (51) 

where rf n — > as n — > oo since, with high probability, the eavesdropper can decode X s given 
due to (41). Using (40), (41), (48), (50) and (51) in (47), we get 
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The proof is completed by noting that due to (14), = 1 implies A c s = 1, V«S C /C, and 
writing 

S ~ H(W S ) H(W S ) E keS Rk ~ 

□ 

We note that this way the achievable 5-secrecy sum-rate is 

R C su m (6) = ™n{cZ,~[C%-CZ]} (54) 

C. Time-Division 

We can also use TDMA to get an achievable region. Since, in such a scheme, only one user 
is transmitting at a given time, both sets of constraints collapse down to a set of single-user 
secrecy constraints, for which the results were given in [6]: 

Theorem 3: Consider this scheme: Let a k G [0, 1], k = 1, . . . , K and J2k=i a k = !• User k 
only transmits of the time with power Pu/oik using the scheme described in [6]. Then, the 
following set of rates is achievable: 

{**HM£fe)-H i+ =)}' k = l ' - K ) <55) 

We will call the set of all R satisfying the above, Q 1 {8). 

Proof: Follows directly from [6, Theorem 1]. □ 
Note that with this scheme, the achievable 5-secrecy sum-rate is given by 



K 



ak, ( o k + P k \ a k . ( ' P, 



K um (S, «) = E^I3 log ( ) , ^ log ( 1 + ^ ] \ (56) 



k=l 



25 ° \a k + hP k J '2 °l a k 



Theorem 4: The above described TDMA scheme achieves a maximum sum-rate of 



Rl um (5)= mm ^Cl-^-CZ]) (57) 
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using the optimum time-sharing parameters 



Pi 



«: = (58) 

Proof: Maximizing each term in (56) over the time-sharing parameters {ctk}, is a convex 
optimization problem over Taking the derivative of the Lagrangian with respect to o>k and 
equating it to zero gives (58), which simultaneously minimizes both terms in the minimum. 
Using this in (56) yields (57). □ 

Since in this scheme only one user is transmitting at any given time, both individual and 
collective constraints are satisfied. We see that for collective secrecy constraints, this region 
is a subset of Q c {5). For individual secrecy constraints, this does not hold. We can then, using 
time-sharing arguments, find a new achievable region for individual constraints that is the convex- 
closure of the union of the two regions. 

Theorem 5: The following region is achievable for individual secrecy constraints: 

Ql{8) = convex closure of (g\5) U G T (5)) (59) 

IV. 5-Secrecy Sum Capacity 

In this section, we present an upper bound on the 5-secrecy sum-rate, denoted C sum (5), for 
both individual and collective constraints, and show that this bound corresponds to the 5-secrecy 
sum-rate achievable under both constraints, giving us the secrecy sum-capacity of GMAC-WT 
for individual and collective constraints. We note that a sum-rate constraint on both individual 
and collective constraints can be obtained using the constraints for the set K,. In this case, both 
sets of constraints collapse down to 

A H(W K \Z) 

A/c = — — > d (60) 
H(W K ) 

Theorem 6: For the GMAC-WT, the 5-secrecy sum-capacity for both individual and collective 
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secrecy constraints is given by 

C sum {5) = min J[C£ - C*]} (61) 

Proof: We first show that the right-hand side of (61) is an upper bound on the <5-secrecy 
sum-rate for both constraints. Observe that (61) is equal to the secrecy sum-rate achievable in 
(54) for collective constraints using superposition coding, and by TDMA in (57), which satisfies 
both collective and individual constraints. Hence, we get the 5-secrecy sum-capacity of the 
GMAC-WT for both individual and collective constraints. 

The first term in the minimum of (61) is due to the converse for the GMAC, since the intended 
receiver needs to be able to decode the transmitted messages. To see the second term, assume 
5 > 0. This is without loss of generality, since if 5 = 0, we have no secrecy constraint and only 
the first term applies. We first note that from Fano's inequality, we have 

H(W K \Y, Z) < #(W,c|Y) < n Vn (62) 

where r) n — > as n — * oo. We then use the constraint in (60): 



c — 


-H(W K ) 

n 


(63) 


< 




(64) 


< 


^[ff(Wjc|Z) + nn n - H(W K \Y, Z)] 


(65) 




JLj(W,c;Y|Z) + i£ 


(66) 


< 




(67) 



where we used (62) in (65), and Wjc — > X*; — > Y — > Z in the last step. We now adopt Lemma 
10 in [6] to upper bound the differences between the received signal entropies at the receiver 
and wire-tapper: 
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Lemma 7 (Lemma 10 in [6]): Let £ = -h(Y) where Y, Z are as given in (2). Then, 

h2 2 ^ 



n 



h(Y) - h(Z) < < - n0(O - 7T log 



27re 1 - h 



2ne 



(68) 



Proof: The proof follows using the entropy power inequality [31]. Recall that we can write 
h(Z) = h(VhY + N MW ). Then, using the entropy power inequality, we have 



2 ^(Z) = 2l ft (v^Y+NMw) > 2 f[''(Y)+nlogv / ft] + 2 ^(N M w) 



(69) 



Now h(Y) = < and /?(N MW ) = f log[2vre(l - h)]. Hence, 



2^ > h2 2 S + 27re(l - h) 



(70) 



which, after taking the log, gives 



h(Z) > - log [h2 2 ^ + 27re(l - h) 



n 

— log 

2 6 



27re 1 - h 



h2 2 ^ 
2vre 



subtracting from h(Y) = n£ completes the proof of the lemma. 
Corollary 7.1: 

h(Y) - h(Z) < n[Cl - Cl\ 



(71) 
(72) 

□ 
(73) 



Proof: From the converse to the GMAC coding theorem, we can show that 



n 



/)(Y)<-log(27re(l + P /c )) 



(74) 



Let h(Y) = n^. Then, £ < ilog(27re(l + P£)), and since 0(£) is a non-increasing function of 
i, we get 0(0 > (ilog(27re(l + P K ))). Thus, 

(75) 
(76) 



77 77 

/7(Y) - h(Z) < - log (2vre(l + P K )) - - log \2iie (1 - h + h(l + P K ))} 



n[Cl - C 
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Now, we can use (67) to write 



19 



□ 



(=1 



TL Tl 

- log (2vre) - - log (2vr e ; 



I(X K ; Y|Z) = I(X K ] Y, Z) - J(X K ; Z) (77) 

= /(Xyc; Y) + I(X K ; Z|Y) - /(X^; Z) (78) 

= /(X /c ;Y)-/(X /c ;Z) (79) 

= /»(Y) - h(Y\X K ) - h(Z) + h(Z\X K ) (80) 

n 

= [h{Zi\X K>i ) - h(Yi\X Kti )] + [h(Y) - h(Z)} (81) 

+ [h(Y) - h(Z)} (82) 
= h(Y) - h(Z) (83) 
< n[Cl - CI] (84) 

where we used X^ — >• Y — > Z to get (78), and applied Corollary 7.1 in the last step. Using (84) 
in (67) completes the proof. □ 
To see when we the secrecy constraint is more constraining on the sum-rate than the decod- 
ability constraint, we can write (61) also as 

_ \\\og{i + p K ), if^i-^gggr 

C sum (5) = log(1+PK) (85) 

{ 25 1U 6 \l+hP K ) ' 11 - 1 log(l+PSc) 

V. Numerical Results and Observations 

It can be seen that if the wire-tapper's channel is much worse than that of the legitimate 
receiver, i.e., h —* 0, then C sum {5) — > C(Ptc), we incur no loss in 5-secrecy sum-capacity. On 
the other hand, if the wire-tapper's signal is not much degraded, i.e., h —> 1, then C sum {5) — > 0, 
and it is no longer possible to communicate with secrecy. 

An interesting point to note is that the secrecy sum-capacity, C sum (8), is upper bounded by 
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15 l°g ( \+hP K ) ' wn i cri l% an increasing function of P K for h < 1, but as — > oo, C sum (5) is 
upper bounded by — h log h. We see that regardless of how much power we have available, the 
5-secrecy sum-capacity with a non-zero level of secrecy is limited by the channel's degradedness, 
h, and the level of secrecy required, 5. Also, it is inversely proportional to the level of secrecy 
desired, 5, but inversely proportional to the logarithm of h, the degradedness of the channel. 
Since in the range [0, 1], log(x) goes to faster than —a; -1 , an increase in h affects 5-secrecy 
sum-capacity more than a similar increase in 5. This can be seen in Figures 2-4 which show 
the region Q for 5 = 0.01,0.5,1 and h = 0.1,0.5,0.9 for two users. When 5 — > 0, we are 
not concerned with secrecy, and the resulting region corresponds to the standard GMAC region, 
[31]. The region for 5 = 1 corresponds to the perfect secrecy region, i.e., transmitting at rates 
within this region, it is possible to limit the rate of information leakage to the wire-tapper to 
arbitrarily small values. It is seen that relaxing the secrecy constraint may provide a larger 
region, the limit of which is the GMAC region. Note that it is possible to send at capacity of 
the GMAC and still provide a non-zero level of secrecy, the minimum value of which depends 
on the level of degradedness, h. Especially when the degradedness is high, i.e., h — > 0, then 
we note that the achievable secrecy regions for 5 = 0.01 and S = 0.5 coincide with the GMAC 
region without the secrecy constraint. Also shown in the figures are the regions achievable by 
the TDMA scheme described in the previous section. Although TDMA achieves the secrecy 
sum capacity with optimum time- sharing parameters, this region is in general contained within 
G c ($). Depending on h and S, the TDMA region is sometimes a superset of Q l (5), as observed 
in Figures 2, 3, sometimes a subset of G l {$), as observed in Figure 4 when 5 = 0.01 or 5 = 0.5, 
and sometimes the two regions can be used with time-sharing to enlarge the achievable region 
with individual constraints, see Figure 4, 5 = 1. Close examination of these figures show that 
when the eavesdropper has a much worse channel, i.e., low h, and the secrecy constraint 5 
is low, then Q l {5) gives a larger region. However, as we increase the secrecy constraint and 
the eavesdropper has a less noisy version of the intended receiver's signal, the TDMA region 
becomes more dominant. 
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Another interesting note is that even when a user does not have any information to send, it can 
still generate and send random codewords to confuse the eavesdropper and help other users when 
considering the collective secrecy constraints 1 . This can be seen in Figures 2-4 as the TDMA 
region does not end at the "legs" of G c (5) when Q c {8) is not equal to the GMAC capacity region. 
In addition, as noted in [5], the intended receiver decodes the codeword transmitted completely, 
and as such |_|J low-rate messages can be transmitted each in perfect secrecy by the users. 

VI. Conclusions 

We have examined secure communications in a multiple access channel in the presence of a 
wire-tapper. Defining the appropriate secrecy measures, we have found achievable secrecy rate 
regions, and established the secrecy sum capacity of the GMAC-WT. 

A main contribution of this paper is that, we show that the multiple-access nature of the channel 
can be utilized to improve the secrecy of the system. Allowing confidence in the secrecy of all 
users, the secrecy rate of a user is improved since the undecoded messages of any set of users 
acts as additional noise at the wire-tapper and precludes it from decoding the remaining set of 
users. 

The results in this paper are based on the wire-tapper having access to a degraded version of the 
intended receiver's signal. The case where the eavesdropper's received signal is not necessarily 
degraded, termed the General Gaussian multiple access wire-tap channel, where some users may 
help improve the secrecy rates for other users by jamming the eavesdropper is explored in a 
follow-up work, [33]. The secrecy constraints in this paper are assumed to be identical across 
the users. It might be interesting to explore heterogeneous scenarios where users might have 
different secrecy requirements. We assume in this paper that the eavesdropper's channel gains 
are known to the legitimate parties. These channel gains may not be easy to obtain in practice. 
If the eavesdropper is known to be outside a certain area, we might opt to have a worst case 
system design, considering the boundary of the "secure" area. 

'This general idea is explored in detail in our follow-up work [32], [33]. 
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Finally, we remark that information theoretic secrecy has attracted a lot of attention in the 
research community including various multiterminal formulations since the submission of this 
work, for which we refer the reader to [33] and the references therein. 
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Fig. 2. Regions for Pi = 10, P 2 = 5, S = {0.01, 0.5, 1} and h = 0.1 
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Fig. 3. Regions for Pi = 10, P 2 = 5, S = {0.01, 0.5, 1} and h = 0.5 



0.6 



0.2 - 



-GWl) 
' G c (0.5) 
'- G C (0.01) 

- G|(l) 
' G (0.5) 

-V- G'(O.Ol) 
^^G T (1) 
G T (0.5) 

- G T (0.01) 
i— G' (I) 

t • ■ <r (0.5) 

- G„(0.01) 



V 
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